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REMARKS 

Applicant has amended the claims to overcome the rejections cited by the Examiner. Applicant 
requests that the rejection under the first paragraph of § 1 12 be withdrawn since claims 7, 12, and 
24 were canceled. Claim 1 1 was also canceled and claims 6 and 23 were rewritten without the word 
"substantially" to overcome the rejection under the second paragraph of § 1 12. 



The primary cited reference, Findley, discloses an efficient method of detecting attempted 
unauthorized use of credit cards via remote purchase by telephone. Although on the surface this 
reference appears to be similar to Applicant's invention, there are several fundamental differences. 
Findley is designed to "limit its exposure to repetitive theft from the same merchandise category." 
Column 4 5 lines 5 9-6 1 . In direct contrast, Applicant's invention is designed to encourage and protect 
repetitive purchases of the same merchandise. Put another way, Fi ndley f s system and me thod 
C\ triggers a security hold on a n account if t he beh avior of the user becomes too consistent, where as 
Applicant's system an d method reacts to be havior that deviates from a consistent pattern, 

Perhaps the easiest explanation for this first fundamental difference is that Findley is designed 
to monitor activity made from any telephone in the world for purchases selected from a massive 
array of products and/or services. Because of the potentially random use of telephones and the 
enormous variety of purchases, Findley is understandably highly focused on the telephone calling 
patterns and credit card usage habits of authorized users. In contrast, Applicant's invention is 
designed to work with direct, user-interface terminals (e.g., gas stations) where the user is actually 
standing at the provider's terminal and is purchasing from a relatively limited supply of goods and/or 
services for receipt thereof at the terminal. Because the purchasing habits of users who frequent 
direct user-interface terminals tend to be extremely consistent, Applicant's invention does not address 
calling patterns (i.e., how or where the terminal is engaged) or credit card usage habits (e.g., dollar 
amounts, time since last purchase, etc.). Rather, Applicant focuses on anal yzing the consistency of 
the current selection of goods and/or services at the terminal. 
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It is practically inconceivable that Findley would be applied at a direct user-interface terminal 
By way of illustration, consider one of the example transactions described in Findley itself, 
compared to a transaction by a user of Applicant's invention at an automobile refueling station. A 
credit card customer that is using a telephone will tend to purchase different goods or services every 
time they pick up the phone. Occasionally, a repeat customer may desire to purchase one or two of 
the same goods or services, or perhaps multiple items for friends or family members. However, it 
is improbable that a repeat customer of, for example, a book store, a clothing purveyor, or an 
electronics store, will purchase the same set of books, clothes, or electronics with every return visit. 
It is exactly this type of behavior that Findley is designed to detect and prevent, Thus, it is 
antithetical to suggest that Findley be applied to an application wherein highly consistent purchasing 
behaviorjsthejipnn. 



However, a user of Applicant's invention at an automobile refueling station will tend to make 
the same purchase decisions for goods and/or services every time. For example, the user may always 
purchase premium unleaded fuel, and always purchase an economy car wash. Rather than trigger 
a security alert as would be the case with Findley, Applicant's invention automatically allows such 
consistent behavior by the user to proceed unimpeded in order to expedite the transaction. In other 
words, Findley is great for conventional telephone credit card shopping where goods or services 
number in the millions, and access is virtually unlimited, but it is inappropriate for direct, at-the- 
terminal, self-service transaction applications such as the one described above. 



Another fundamental difference between Findley and Applicant's invention i sthati^rf/gy dpes 
not analyze the actual goods and/or servic es being selected by the user . At best, Findley observes 
the "merchandise category" (column 4, lines 60-61) in which the goods may be classified. However, 
the point-of-sale terminals for which Applicant's invention is designed will inherently all fall within 
the same category (e.g., gas station services). Moreover, Findley teaches one skilled in the art to 
guard against "repetitive theft from the same merchandise category," which is the opposite of 
Applicant's invention. 
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The other factors ("history factors") used by Findley to analyze purchasing behavior are also 
clearly defined Column 3, line 50, through column 5, line 30. The most important factor, the origin 
history factor (OHF), analyzes all of the telephone numbers, via Caller ED, from which previous 
purchases were made. Column 2, lines 40-42. Applicant's invention is not concerned with this 
factor since all purchases made under Applicant's invention originate at the provider's very own 
point-of-sale terminal. Another factor use by Findley is the dollar purchase amount (D). Column 
4, line 8. Applicant is not concerned with the dollar amount purchased by users within its system 
since, again, a typical user will rarely vary his grade of fuel, amount of fuel, and quality level of car 
wash purchased. Findley is also concerned with time between purchases (P) and the number of 
different credit cards used (column 4, lines 22-25), while Applicant does not address these issues. 
Thus, Findley analyzes an entirely different set of criteria for detecting fraud than Applicant. 



Each of the independent claims has been rewritten to highlight at least one fundamental 
difference between Applicant's invention and Findley, namely, the ability to analyze the selection 
of actual goods and/or services by the user. For example, each of the independent claims is now 
specifically required to focus on the "selection of goods and/or services/' and "options for goods 
and/or services." There is no teaching or suggestion in Findley that is directed to the specific goods 
or services either previously selected by the authorized user, or currently selected by the present us er. 
At the very most, Findley can be said to examine a "merchandise category," but even that level of 
scrutiny is limited to guarding against repetitive theft, which is completely antithetical to Applicant's 
invention as discussed at length above. Many of the dependent claims were similarly rewritten to 
remain consistent with their respective independent claims. 

In addition to this requirement, claims 6 and 23 were amended to overcome the second 
paragraph of § 1 12, second paragraph, but also states the user is not required to answer the security- 
related question, "if the user's current selections match the prestored selections or are within a 
desired range of consistency with the prestored selections." Findley makes no provision for 
analyzing a range of goods and/or services selected during a current purchase with those made during 
previous purchases. 
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Claims 9 and 19 go even further than claim 1 by generating user profiles of the goods and/or 
sendees in response to the previous selections made by the user. A current user is then analyzed with 
respect to his or her current selection of goods and/or services by comparing the items selected. In 
addition, if the goods and/or services selected by the current user do not match the user profile of 
goods and/or services, or are not within a desired range of consistency with the prestored selections 
of goods and/or services, then the current user must correctly answer a security-related question. 

The other cited references, Kanevsky and Pentias, merely stand for the propositions of 
questioning a user to provide access control, and protecting multiple account numbers, respectively. 
However, since the primary cited reference has been effectively disqualified, the arguments for these 
references are moot. 

It is respectfully submitted that the claims are in condition for allowance and favorable action 
is requested. No extension of time is believed to be required. However, in the event that an 
extension of time is required, please charge that extension fee and any other required fees to IBM 
Corporation Deposit Account Number 09-0447. 



Respectfully submitted, 




Reg, No, 44,975 

BRACEWELL & PATTERSON, L.L.P. 
P.O. Box 969 

Austin, Texas 78767-0969 
(512) 343-6116 



ATTORNEY FOR APPLICANTS 
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REDACTED VERSION OF THE CLAIMS 

CanceKciaims 7, 1 1, 12, and 24. 

Amend claims 1-6, 9, 10, 14, 15, and 18-23 as set forth below: 



1 1. (Amended) A method for automatically authorizing a remote point of purchase action at a 

2 facility which permits such actions, said method comprising the steps of: 

3 storing selections of goods and/or services made by an authorized user during a previous 

4 transaction; 

5 prompting a user with options for selecting goods and/or services during a current transaction 

6 at the facility; 

7 comparing the options for goods and/or services selected by the user with the user's prestored 
g selections of goods and/or services : 

9 requiring the user to answer a security-related question if the options for goods and/or services 

10 selected by the user are inconsistent with the user's prestored selections of goods and/or services : and 

11 thereafter permitting the current transaction only if the user correctly answers said security- 

12 related question, 

1 2. (Amended) The method of claim 1 wherein the step of storing selections comprises generating 

2 a user profile of selections of goods and/or services made by the user during the last n transactions. 

1 3. (Amended) The method of claim 1 wherein the step of storing selections comprises storing 

2 selections of goods and/or services made by the user at a plurality of facilities. 

1 4. (Amended) The method of claim 1 wherein the step of storing selections comprises storing 

2 selections of goods and/or services made by the user while using a credit or debit card. 
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1 5. (Amended) The method of claim 1 wherein the step of storing selections comprises storing 

2 selections of goods an d/or services made by the user while using a plurality of credit or debit cards, 

3 wherein each of the credit or debit cards has a different account number. 

1 6. (Amended) The method of claim 1 wherein the step of requiring the user to answer a security- 

2 related question [requires] is not required if the user's current selections [to be substantially 

3 inconsistent with] match the prestored selections or are within a desired range of consistency with 

4 the prestored selections . 

1 7. (Canceled) The method of claim 1 wherein the step of requiring the user to answer a security- 

2 related question is predicated on the user's current selections being identical to the prestored 

3 selections. 

1 8, (Unchanged) The method of claim 1 wherein the step of requiring the user to answer a security- 

2 related question entails requiring the user to answer a plurality of security-related questions, and 

3 wherein the step of permitting the current transaction requires the user to answer each of the security- 

4 related questions correctly. 

1 9. (Amended) A method for automatically authorizing a remote point of purchase action with a 

2 credit or debit card at facilities which permit such actions, said method comprising the steps of: 

3 storing selections of goods an d/or services made by an authorized user during the previous n 

4 transactions with the credit or debit card at the facilities and generating a user profile of goods and/or 

5 services in response thereto; 

o prompting a current user with options for goods and/or services during a current transaction with 

7 the credit or debit card at one of the facilities; 

8 comparing the options for goods and/or services selected by the cunrent user with the user profile 

9 of goods and/or services : 

10 requiring the current user to answer a security-related question if the options for goods and/or 
services selected by the current user [are inconsistent with] do not match the user profile of goods 
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u and/or services, or are not within a desired range of consistency with the prestored selections of 

13 goods and/or services: and then 

H permitting the current transaction only if the current user correctly answers said security-related 

is question. 

1 10. (Amended) The method of claim 9 wherein the step of storing selections comprises storing 

2 selections of goods and/or services made by the authorized user while using a plurality of credit or 

3 debit cards at various ones of the facilities, wherein each of the credit or debit cards has a different 

4 account number. 

1 11. (Canceled) The method of claim 9 wherein the step of requiring the current user to answer a 

2 security-related question requires the current user's current selections to be substantially inconsistent 

3 with the user profile. 

1 12. (Canceled) The method of claim 9 wherein the step of requiring the current user to answer a 

2 security-related question is predicated on the current user's current selections being identical to the 

3 user profile. 

1 13. (Unchanged) The method of claim 9 wherein the step of requiring the current user to answer 

2 a security-related question entails requiring the current user to answer a plurality of security-related 

3 questions, and wherein the step of permitting the current transaction requires the current user to 

4 answer each of the security-related questions correctly. 

1 14. (Amended) A system for automatically authorizing a remote point of purchase action at a 

2 facility which permits such actions, comprising: 

3 a memory for storing previous selections of goods and/or services made by an authorized user; 

4 a user terminal adapted to prompt a user with options for goods and/or services during a 

5 transaction at the facility; 
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processor means for comparing options for goods and/or services selected by the user at the user 
terminal during a current transaction with the previous selections of goods and/or services stored in 
the memory; 

control means for requiring the user to answer a security-related question when the options for 
fippds and/or $efyices selected by the user at the user terminal during the current transaction [are 
inconsistent with] do not match the previous selections of goods and/or services stored in the 
memory, or are not within a desire d range of consistency with the previous selections of goods 
and/or services, and for thereafter permitting the current transaction only when the user correctly 
answers said security-related question. 

15. (Amended) The system of claim 14 wherein the memory generates a user profile of selections 
of goods a nd/or services made by the user during the last n transactions. 

16. (Unchanged) The system of claim 14 wherein the user terminal is a device for reading a credit 
or debit card. 

1 7. (Unchanged) The system of claim 14 wherein the control means requires the user to correctly 
answer a plurality of security-related questions. 

18. (Amended) A computer program product, residing on a computer usable medium and having 
computer usable program means embodied therein, said computer usable program means 
comprising: 

means for storing selections of goods a nd/or services made by an authorized user during a 
previous transaction; 

means for prompting a user with options for goods and/or services during a current transaction 
at the facility; 

means for comparing options for goods and/or services selected by the user with the prestored 
selections of goods and/or services : 
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i o means for requiring the user to answer a security-related question if the options for goods and/or 

1 1 services selected by the user [are inconsistent with] do not match the prestored selections of goods 

12 and/or services, or are not within a desired ranpe of consistency with the prestored selections^ 

13 goods and/or services: and 

u means for permitting the current transaction only if the user correctly answers said security- 
is related question. 




i 



ons 



19, (Amended) The computer program product of claim 1 8 wherein the means for storing selecti 
generates a user profile of selections of goods and/or services made by the user during the last n 



3 transactions. 



20, (Amended) The computer program product of claim 18 wherein the means for storing selection 



2 stores selections of goods an d/or services made by the user at a plurality of facilities. 



21 . (Amended) The computer program product of claim 1 8 wherein the means for storing selections 
stores selections of goods and/or services made by the user while using a credit or debit card. 



1 22. (Amended) The computer program product ofclaim 18 wherein the means for storing selections 

2 stores selections of goods and/or services made by the user while using a plurality of credit or debit 

3 cards, wherein each of the credit or debit cards has a different account number. 



1 23. (Amended) The computer program product of claim 18 wherein the means for requiring the 

2 user to answer a security-related question is not required if [predicated on] the user's current 
selections [being substantially inconsistent with] match the prestored selections or are within a 
desired range of consistency with the prestored selections . 

24. (Canceled) The computer program product ofclaim 1 8 wherein the means for requiring the user 
to answer a security-related question is predicated on the user's cuiTent selections being identical to 

3 the prestored selections. 
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25. (Unchanged) The computer program product of claim 1 8 wherein the means for requiring the 
user to answer a security-related question entails requiring the user to answer a plurality of security- 
related questions, and wherein the means for permitting the current transaction requires the user to 
answer each of the security-related questions correctly. 



Docket No. AT9-99-725 
Page 15 



deceived from < 512 472 9123 > at 1/30103 1:51 :49 PM [Eastern Standard Time] 



